Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A462BE562FEA11F0A2408215C4F9AE02.roa
File: A462BE562FEA11F0A2408215C4F9AE02.roa (raw, json)
Hash identifier: c9oaehzMv1DcXNL9JFmFav2UXSxLzOzU41aKILRV3os=
Subject key identifier: 04:48:A9:D7:34:0B:1F:A4:51:F2:F5:29:9B:0C:1E:87:30:97:81:E2
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4AFD
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A462BE562FEA11F0A2408215C4F9AE02.roa
Signing time: Tue 13 May 2025 11:10:07 +0000
ROA not before: Tue 13 May 2025 11:10:07 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135918
IP address blocks: 42.96.0.0/22 maxlen: 22
49.236.208.0/22 maxlen: 22
103.14.224.0/23 maxlen: 23
103.28.32.0/22 maxlen: 22
103.65.234.0/23 maxlen: 23
103.67.196.0/23 maxlen: 23
103.67.198.0/23 maxlen: 23
103.68.84.0/23 maxlen: 23
103.69.86.0/23 maxlen: 23
103.69.96.0/23 maxlen: 23
103.74.100.0/22 maxlen: 22
103.95.196.0/22 maxlen: 22
103.110.32.0/23 maxlen: 23
103.129.126.0/23 maxlen: 23
103.139.154.0/23 maxlen: 23
103.149.252.0/23 maxlen: 23
103.151.52.0/23 maxlen: 23
103.151.238.0/23 maxlen: 23
103.153.64.0/23 maxlen: 23
103.157.204.0/23 maxlen: 23
103.160.2.0/23 maxlen: 23
103.161.96.0/23 maxlen: 23
103.161.112.0/23 maxlen: 23
103.161.118.0/23 maxlen: 23
103.161.180.0/23 maxlen: 23
103.162.24.0/23 maxlen: 24
103.176.22.0/23 maxlen: 23
103.176.24.0/23 maxlen: 23
103.176.250.0/23 maxlen: 24
103.177.34.0/23 maxlen: 23
103.178.230.0/23 maxlen: 23
103.178.232.0/23 maxlen: 23
103.179.174.0/23 maxlen: 23
103.180.138.0/23 maxlen: 23
103.183.120.0/23 maxlen: 23
103.188.82.0/23 maxlen: 23
103.190.120.0/23 maxlen: 23
103.211.200.0/23 maxlen: 23
103.211.206.0/23 maxlen: 23
103.218.122.0/23 maxlen: 23
103.228.36.0/23 maxlen: 23
103.228.74.0/23 maxlen: 23
103.229.52.0/23 maxlen: 23
103.231.248.0/23 maxlen: 23
103.239.66.0/23 maxlen: 23
103.252.92.0/23 maxlen: 23
103.252.94.0/23 maxlen: 23
163.61.110.0/23 maxlen: 23
163.61.182.0/23 maxlen: 23
163.223.8.0/23 maxlen: 23
163.223.224.0/23 maxlen: 23
202.158.244.0/22 maxlen: 22
2401:5ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Jun 2025 14:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19197 (0x4afd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: May 13 11:10:07 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6823288e-86a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:1e:97:18:28:2b:f5:fc:be:a2:4e:0e:73:
ad:50:d8:55:94:8b:f9:05:19:36:75:79:af:8e:33:
72:e8:52:35:76:b8:e1:c0:35:88:3d:37:af:f3:aa:
24:53:50:da:29:c3:ca:a1:e5:3d:25:b3:26:7a:82:
9b:91:e5:d4:69:5a:70:10:88:95:f6:08:d3:5d:82:
80:e3:0b:85:71:7e:53:c4:8e:39:29:e2:e5:0b:7e:
a5:c7:40:0d:5a:b8:e1:7c:1b:03:dc:cb:e0:6d:08:
71:0c:cc:5e:59:3d:28:4c:5c:e0:59:61:d7:fb:de:
71:e0:dd:d6:29:f0:2f:3d:53:c3:48:56:9c:c7:09:
5e:84:83:77:b6:60:3f:53:29:80:81:fb:50:ef:ca:
9a:1b:04:8c:e2:71:15:02:81:58:09:e6:e8:c5:97:
e3:71:56:cc:32:98:db:ea:12:61:6a:9b:c6:e9:b8:
9a:50:66:24:13:98:0d:2c:34:5f:44:6e:f9:ec:2b:
dc:a0:aa:45:b0:ee:63:c8:10:2d:41:bf:d5:6a:cc:
66:82:34:92:1b:c8:79:cd:a0:28:2b:be:5b:f7:d0:
4f:c8:bc:8a:6e:fa:2e:38:3b:6f:d0:31:0f:4a:a8:
43:a9:a2:c4:12:cc:0f:e5:82:ac:a8:d8:81:d4:47:
59:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:48:A9:D7:34:0B:1F:A4:51:F2:F5:29:9B:0C:1E:87:30:97:81:E2
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A462BE562FEA11F0A2408215C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.96.0.0/22
49.236.208.0/22
103.14.224.0/23
103.28.32.0/22
103.65.234.0/23
103.67.196.0/22
103.68.84.0/23
103.69.86.0/23
103.69.96.0/23
103.74.100.0/22
103.95.196.0/22
103.110.32.0/23
103.129.126.0/23
103.139.154.0/23
103.149.252.0/23
103.151.52.0/23
103.151.238.0/23
103.153.64.0/23
103.157.204.0/23
103.160.2.0/23
103.161.96.0/23
103.161.112.0/23
103.161.118.0/23
103.161.180.0/23
103.162.24.0/23
103.176.22.0-103.176.25.255
103.176.250.0/23
103.177.34.0/23
103.178.230.0-103.178.233.255
103.179.174.0/23
103.180.138.0/23
103.183.120.0/23
103.188.82.0/23
103.190.120.0/23
103.211.200.0/23
103.211.206.0/23
103.218.122.0/23
103.228.36.0/23
103.228.74.0/23
103.229.52.0/23
103.231.248.0/23
103.239.66.0/23
103.252.92.0/22
163.61.110.0/23
163.61.182.0/23
163.223.8.0/23
163.223.224.0/23
202.158.244.0/22
IPv6:
2401:5ec0::/48
Signature Algorithm: sha256WithRSAEncryption
0b:35:69:b8:3f:c4:6d:a7:5d:b7:55:66:ac:c2:ab:a6:e7:c4:
06:50:dd:fa:4a:a9:d2:19:cc:93:2e:c6:a6:7a:fd:92:92:b7:
23:9f:73:e1:c7:2c:b5:26:de:bc:a5:63:b7:9c:55:7d:fe:e2:
dd:d1:10:5a:73:54:1f:a5:d2:3f:82:ee:66:44:c9:b7:04:d2:
b3:6e:00:90:63:33:45:cd:8b:76:41:41:74:e9:d8:37:61:3a:
89:87:62:18:80:4d:4d:a2:28:c4:da:ae:0c:33:e0:67:b9:a4:
63:b0:b7:7e:e1:7c:69:ad:c5:88:81:46:ec:6f:1c:2b:54:cb:
b6:2b:f6:37:87:33:c3:4b:36:73:81:c7:08:60:0b:cd:cf:06:
d6:9a:89:3c:48:51:c6:1f:aa:67:ba:c1:88:1c:cc:10:1f:c8:
f2:5a:a9:25:2a:c0:02:2f:10:91:db:38:e6:07:31:97:c3:49:
67:ab:17:d2:12:67:01:87:a9:2b:84:83:0c:29:77:19:08:6a:
69:52:0f:59:15:95:fd:44:49:8e:10:54:f2:d3:be:c3:fd:d5:
48:66:07:ea:24:7a:2d:d1:77:89:db:44:f3:8d:3a:e2:4d:20:
33:96:87:f4:a3:a8:27:d6:96:86:47:34:77:2d:4c:90:5a:a9:
f1:0d:93:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:56:32 2025 by rpki-client